Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/7981327F2B537F29F96DA0422122BBB9E7ACCE50.cer
File:                     7981327F2B537F29F96DA0422122BBB9E7ACCE50.cer (raw, json)
Hash identifier:          J09hzdphBvsDA+BveujJjyErjsVlJbliOikWm91s4p0=
Subject key identifier:   79:81:32:7F:2B:53:7F:29:F9:6D:A0:42:21:22:BB:B9:E7:AC:CE:50
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       14A923CE0718DE282AD7A85AE91750BB556C6214
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/1/7981327F2B537F29F96DA0422122BBB9E7ACCE50.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 23:47:09 +0000
Certificate not after:    Wed 02 Apr 2025 23:52:09 +0000
Subordinate resources:    AS: 267077
                          IP: 45.228.104.0/22
                          IP: 2804:47cc::/32

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 03:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a9:23:ce:07:18:de:28:2a:d7:a8:5a:e9:17:50:bb:55:6c:62:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Apr  3 23:47:09 2024 GMT
            Not After : Apr  2 23:52:09 2025 GMT
        Subject: CN=7981327F2B537F29F96DA0422122BBB9E7ACCE50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:35:a5:ec:90:a1:f3:0a:7a:12:55:84:df:50:
                    c8:88:6a:f6:cd:19:fb:12:ff:71:60:cb:f8:43:57:
                    56:8a:d4:dd:fa:89:aa:76:a4:58:01:f5:48:9f:2f:
                    9d:94:05:59:36:75:47:4e:a1:8e:e3:60:bd:3e:8b:
                    c2:a6:0e:e8:ba:b2:3a:13:07:2c:26:99:f8:54:60:
                    1c:92:47:f1:f9:0d:12:09:d7:2a:cc:77:2d:20:3d:
                    8a:d1:72:49:70:0f:26:1d:15:c7:d7:5b:cd:c6:a6:
                    e0:a8:ee:55:ac:50:22:53:9d:fa:1e:e4:32:a2:51:
                    a0:03:73:8a:0c:51:aa:d2:33:36:fc:25:eb:84:f0:
                    c8:7a:83:78:2f:5a:96:5a:b9:ce:d3:2d:ba:6f:3f:
                    d1:6a:8f:cd:d0:9f:90:75:3a:fe:2b:4f:52:a5:20:
                    62:c4:de:e9:81:22:2f:db:d0:a3:9e:7c:99:c1:59:
                    0a:3a:97:a1:72:48:c8:11:c2:ed:81:58:d1:3c:e0:
                    50:4d:a6:37:03:8d:78:ab:08:76:b5:c6:d9:a6:c6:
                    a8:cf:fb:2f:c2:ef:1a:f5:a5:d2:f7:ed:c1:4f:fd:
                    5e:00:76:01:86:9b:79:84:e5:8c:3b:35:83:5c:e4:
                    dc:31:a5:b7:6d:6e:26:79:c9:af:8f:3d:ca:e3:35:
                    38:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:81:32:7F:2B:53:7F:29:F9:6D:A0:42:21:22:BB:B9:E7:AC:CE:50
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ZaUJAgMXjYtZ8peoK2yBcHdxjJSAY2b9SzXs4763K1J/1/7981327F2B537F29F96DA0422122BBB9E7ACCE50.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.104.0/22
                IPv6:
                  2804:47cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267077

    Signature Algorithm: sha256WithRSAEncryption
         15:07:ba:c8:fd:25:c7:73:fb:91:1e:ee:8a:f0:50:56:82:57:
         c7:33:89:35:83:3a:82:26:3f:29:2c:2b:6b:e0:7e:38:aa:56:
         f4:55:b9:e6:c3:e2:48:22:f5:55:0e:c3:23:64:4a:9a:55:02:
         9e:4f:60:5a:5b:18:9d:06:94:42:19:10:5d:9e:d8:f0:e7:8d:
         fd:c2:dd:db:36:0f:0b:41:c5:20:5e:2b:a7:89:2a:48:bf:10:
         21:42:2a:df:42:b3:ae:ea:9d:64:4d:f4:07:33:2e:fa:0d:ba:
         98:fa:66:bc:ca:62:99:b2:27:84:4a:5f:bc:cc:e4:a9:02:11:
         3b:be:29:4b:9d:14:74:87:99:82:1e:aa:f6:88:81:a1:b8:c5:
         e7:52:38:20:1c:df:8b:bb:0c:44:62:c5:63:60:ba:e1:1d:21:
         1c:61:3a:10:00:d7:35:6b:ed:2e:fb:9e:e5:a4:03:f5:b5:6b:
         ac:ab:8e:43:bb:7c:93:3e:a0:25:95:bb:93:d5:35:cd:1d:e3:
         b3:66:3a:e7:cc:f5:b2:24:f0:09:28:5b:16:da:56:9a:2b:32:
         da:9b:05:0c:7d:e7:17:d8:90:96:27:2d:12:62:92:16:c0:77:
         ce:e7:ed:fb:40:fe:fd:a9:04:25:15:8e:67:20:20:e2:8b:23:
         44:c2:2c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:23 2024 by rpki-client on console-ams.rpki-client.org